CVE-2005-3240: microsoft ie Race Condition

Vulnerability summary

CVE-2005-3240 is a medium (CVSS 5.1) Race Condition vulnerability in microsoft ie. EPSS estimates a 5.55% chance of exploitation in the next 30 days, higher than 92.8% of scored vulnerabilities.

Timeline

1. 14-02-2006
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.